Level N/A
Mechanisms exist to develop and keep current a catalog of applicable risks associated with the organization's business operations and technologies in use.